Installation, Storage, and Compute with Windows Server 2016 — Question 47

Your network contains an Active Directory domain.
The domain contains two Hyper-V hosts.
You plan to perform live migrations between the hosts.
You need to ensure that the live migration traffic is authenticated by using Kerberos.
What should you do first?

Answer options

• A. From Server Manager, install the Host Guardian Service server role on a domain controller.
• B. From Active Directory Users and Computers, add the computer accounts for both servers to the Cryptographic Operators group.
• C. From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both servers.
• D. From Server Manager, install the Host Guardian Service server role on both servers.

Correct answer: C

Explanation

The correct answer is C because modifying the Delegation properties allows the Hyper-V hosts to delegate authentication for the live migration traffic securely. The other options do not address the need for Kerberos delegation specifically and are not necessary for this task.